Terms of service

Darkgram provides mailboxes on domains you or your organisation control, with conversation view, labels, search, attachments, optional end-to-end encryption, file storage and an administrator console. It sends and receives mail through Amazon Simple Email Service and stores data with Amazon Web Services. The service is provided as is and may change over time.

A domain is added to the service by proving control of it through a DNS record. Whoever proves control becomes the domain's administrator and is responsible for every mailbox on it: creating and removing them, aliases, quotas, and the DNS records that make mail flow. You must keep control of the domain for as long as mailboxes exist on it; losing the domain means losing delivery to those mailboxes.

Administrators must not create mailboxes for people who have not agreed to these terms, and must not read or disclose the mail of the people on their domain beyond what running the service requires.

• Keep your password and, if you use one, your encryption passphrase private. The passphrase cannot be reset; losing it means losing access to encrypted mail.
• Two-step verification is available and recommended for administrators.
• You are responsible for what is sent from your address and for the files you store and share.

You may not use the service to:

• send unsolicited bulk mail, or mail that misrepresents its sender;
• send malware, phishing, or content that is unlawful where you or the recipient are;
• harass or threaten anyone, or infringe another person's rights;
• probe, overload or interfere with the service or the networks it uses;
• share access to a mailbox with people who are not its holder.

Sending reputation is shared across the service. Mail that bounces or is marked as spam at rates the delivery network flags may be paused for the sending mailbox or domain until the cause is fixed.

End-to-end encryption is performed in your browser with keys you generate. It is only as strong as your passphrase and the device you use it on. The service publishes your public key so others can write to you privately; it never holds your passphrase and cannot decrypt your mail. Encrypted messages are not searchable by the service and have no server-side drafts.

Each mailbox has a storage quota set by its administrator, shared between mail attachments and Drive. Messages have a size limit shown in the composer. Uploads that would exceed the quota are refused rather than partially stored.

An administrator may suspend or delete a mailbox on their domain. The operator may suspend a mailbox or domain that breaks these terms, endangers other users, or harms the service's sending reputation, giving notice where practical.

Deleting a mailbox removes its mail and files. Deleting a domain is refused while mailboxes remain on it. You may leave at any time by asking your administrator to delete your mailbox, after exporting what you want to keep.

The service is run with care but without a guarantee of uninterrupted operation or of delivery of any particular message: email delivery depends on networks and recipients outside our control. Keep copies of anything you cannot afford to lose.

To the extent the law allows, the service and its operator are not liable for indirect or consequential loss, lost data, lost profits, or for content sent or stored by users, and total liability for any claim is limited to the amount paid for the service in the twelve months before the claim, or nothing if the service was free to you.

The date at the top is the date of the current version. Material changes are announced to domain administrators before they take effect; continuing to use the service after that is acceptance.

Questions about these terms go to your domain administrator, who can reach the operator of the service through the administrator console.